I didn't hear this part in the discussion at the F2F meeting, but do you think we may want a EnumSet as well? Or are we assuming that all operations only ever use a single permission?